S0367 - Emotet

Emotet is a Trojan that is primarily spread through spam emails (malspam). The infection may arrive either via malicious script, macro-enabled document files, or malicious link.

Author
agomez
Created
2022-06-09 19:49:07
Last updated
2026-02-07 19:18:33
Downloads
3719696
IPv4 indicators
101
Hostname indicators
176
URL indicators
194
Sample indicators
1451

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

static.s123-cdn-static.com Hostname

modified 2026-11-07 06:10:25
Phishing site (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Malware Download (URLhaus Abuse.ch)

url.emailprotection.link Hostname

modified 2026-11-07 05:05:11
Phishing site (Hybrid-Analysis) · Phishing PayPal (Phishtank) · Apple ID phishing (Antiphishing.com.ar) · Malware Download (Abuse.ch) · Emotet (Abuse.ch)

tcfgo.com Hostname

modified 2026-11-07 04:40:11
Emotet (Telefonica CO SOC)

rashmimaheshwari.com Hostname

modified 2026-11-07 04:40:09
Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

uaisoftware.com.br Hostname

modified 2026-11-07 04:40:04
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Trojan.Generic (Hybrid-Analysis) · Macro.Downloader.MRHO (Hybrid-Analysis)

agtrade.hu Hostname

modified 2026-11-07 04:39:47
Malware Download (URLhaus Abuse.ch) · Emotet (Maltiverse Research Team) · Emotet (Telefonica CO SOC) · Malware Download (Abuse.ch) · Emotet (Abuse.ch)

obserai.co.jp Hostname

modified 2026-11-07 04:39:21
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Malicious site (Hybrid-Analysis)

coolcomputers.info Hostname

modified 2026-11-07 04:39:17
Emotet (Abuse.ch) · Proxy (Mr.Looquer)

bauzeichnung.com Hostname

modified 2026-11-07 04:39:17
Emotet (Abuse.ch)

morinchoiniere.com Hostname

modified 2026-11-07 04:38:54
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Heur.Macro.Generic.h (Hybrid-Analysis)

arquivopop.com.br Hostname

modified 2026-11-07 04:37:11
Malware site (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Emotet (Abuse.ch) · LooksLike.Macro.Malware (Hybrid-Analysis) · Malware Download (Abuse.ch)

mycopier.com.my Hostname

modified 2026-11-07 04:37:04
Malware Download (URLhaus Abuse.ch) · Emotet (Telefonica CO SOC) · Alexa Top 1 Million (Alexa) · DarkGate (ThreatFox Abuse.ch)

softwareulike.com Hostname

modified 2026-11-07 04:37:01
Emotet (ThreatFox Abuse.ch)

www.nwns.org Hostname

modified 2026-11-07 04:36:56
Emotet (Maltiverse Research Team) · Malware Download (Abuse.ch) · Elf (Mr.Looquer) · Malware site (Hybrid-Analysis)

firstlineit.co.za Hostname

modified 2026-11-07 04:36:33
Emotet (Abuse.ch)

talentztech.com Hostname

modified 2026-11-07 04:36:06
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Agent (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

laopos.com Hostname

modified 2026-11-07 04:36:06
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Social Engineering (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

bonita.pro Hostname

modified 2026-11-07 04:36:02
Emotet (ThreatFox Abuse.ch)

isolve-id.com Hostname

modified 2026-11-07 04:35:49
Lokibot (Cybercrime-tracker.net) · Emotet (Abuse.ch) · Botnet (Mr.Looquer)

getlivetext.com Hostname

modified 2026-11-07 04:35:29
Emotet (Telefonica CO SOC) · Malware Download (URLhaus Abuse.ch) · Alexa Top 1 Million (Alexa) · Malicious URL (Hybrid-Analysis)

staging-demo.com Hostname

modified 2026-11-07 04:35:28
Emotet (ThreatFox Abuse.ch)

sedistribuidora.com.br Hostname

modified 2026-11-07 04:35:25
Malware Download (Abuse.ch) · Emotet (Abuse.ch)

http://robertflood.us/eln-images/DGI2YOkSc99XPO/ URL

modified 2026-11-07 02:32:38
Emotet (Telefonica CO SOC) · Malware Download (URLhaus Abuse.ch) · Malicious URL (Hybrid-Analysis)

https://csi-lko.org/-/CZqf0uF2Mn9PEJCowP/ URL

modified 2026-11-07 02:31:33
Emotet (Maltiverse Research Team) · Malware Download (URLhaus Abuse.ch)

renovatiomarketing.com Hostname

modified 2026-11-07 01:49:41
Alexa Top 1 Million (Alexa) · Emotet (ThreatFox Abuse.ch)

codsambal.com Hostname

modified 2026-11-07 01:48:38
Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

tibiadb.com Hostname

modified 2026-11-07 01:41:43
Emotet (Maltiverse Threat Observatory) · Trojan.downloader (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory) · Trojan.wisdomeyes (Maltiverse Threat Observatory)

http://tibiadb.com/exes/MagebotSetupvT852.exe URL

modified 2026-11-07 01:41:43
Emotet (Maltiverse Threat Observatory)

cdn.pzw.io Hostname

modified 2026-11-07 00:49:02
Trojan.downloader (Maltiverse Threat Observatory) · Emotet (Maltiverse Threat Observatory) · Trojan.generic (Maltiverse Threat Observatory)

casinos-hub.com Hostname

modified 2026-11-07 00:38:49
Malware site (Hybrid-Analysis) · Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

bhandaraexpress.com Hostname

modified 2026-11-07 00:38:46
Top Popularity Site (Cisco Umbrella) · Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Trojan.W97M.POWLOAD (Hybrid-Analysis) · Alexa Top 1 Million (Alexa)

dubai-homes.ae Hostname

modified 2026-11-07 00:38:44
Emotet (Abuse.ch) · Malware Download (Abuse.ch)

eventmasti.com Hostname

modified 2026-11-07 00:38:41
Emotet (ThreatFox Abuse.ch)

tomjoosten.nl Hostname

modified 2026-11-07 00:38:29
Malware site (Hybrid-Analysis) · Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

alt-jabel.de Hostname

modified 2026-11-07 00:38:15
Emotet (Abuse.ch) · Trojan.W97M.EMOTET (Hybrid-Analysis) · W97m.Downloader (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

sasystemsuk.com Hostname

modified 2026-11-07 00:38:10
Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · Malware Download (Abuse.ch)

micronews.eu Hostname

modified 2026-11-07 00:37:46
VB:Trojan.VBA.Agent (Hybrid-Analysis) · Generic.Malware (Hybrid-Analysis) · Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

menuazores.com Hostname

modified 2026-11-07 00:37:29
QakBot (ThreatFox Abuse.ch) · Malware Download (URLhaus Abuse.ch) · Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

mundodosabor.com Hostname

modified 2026-11-07 00:36:54
Malware Download (Abuse.ch) · Emotet (Abuse.ch)

pinkesocken.de Hostname

modified 2026-11-07 00:36:18
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

cabelectrical.com.au Hostname

modified 2026-11-07 00:35:18
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Unwanted Software (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

www.lunalysis.com Hostname

modified 2026-11-07 00:35:10
Emotet (Abuse.ch) · Malware Download (Abuse.ch)

aartista.com.br Hostname

modified 2026-11-07 00:34:53
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · IClickFix (ThreatFox Abuse.ch)

ruminavet.lt Hostname

modified 2026-11-07 00:34:47
Emotet (Abuse.ch)

semedacara.com.br Hostname

modified 2026-11-07 00:34:43
Emotet (ThreatFox Abuse.ch) · Malicious URL (Hybrid-Analysis)

web.sun.games Hostname

modified 2026-11-07 00:34:29
Emotet (ThreatFox Abuse.ch)

pharmalogi.com Hostname

modified 2026-11-07 00:34:13
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Unwanted Software (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

phasdesign.com Hostname

modified 2026-11-07 00:33:56
Malware Download (Abuse.ch) · LooksLike.Macro.Malware (Hybrid-Analysis) · VB:Trojan.Valyria (Hybrid-Analysis) · Trojan.Generic (Hybrid-Analysis) · Agent (Hybrid-Analysis)

i.fluffy.cc Hostname

modified 2026-11-07 00:33:55
Malware Download (URLhaus Abuse.ch) · Generic.Exploit.Shellcode.RDI.1 (Hybrid-Analysis) · CVE-2017-8570 (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Malware Download (Abuse.ch)

www.chiark.greenend.org.uk Hostname

modified 2026-11-07 00:33:49
Emotet (Telefonica CO SOC) · Generic.Malware (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

members.nlbformula.com Hostname

modified 2026-11-07 00:33:07
Emotet (Cyber Threat Alliance)

http://www.tibiadb.com/exes/MagebotSetupvT852.exe URL

modified 2026-11-07 00:05:48
Emotet (Maltiverse Threat Observatory)

5.135.149.19 IPv4

modified 2026-11-06 23:58:01
Anonymizer (FireHol) · Emotet (Abuse.ch) · Malware site (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · DDoS Attacker (Blocklist.net.ua)

d7c0d703ba985306babb27bc8c86be746ed9b227194bb4aaae748cacff592a35 Sample

modified 2026-11-06 23:48:48
Emotet (Cyber Threat Alliance)

http://207.148.31.160/doc/Invoice_Notice/xJkcH-pXzw_ikv-yP/ URL

modified 2026-11-06 22:37:52
Emotet (Abuse.ch)

http://artpowerlist.com/lr8RkOxMe/ URL

modified 2026-11-06 22:35:00
Emotet (Telefonica CO SOC)

http://inverglen.com/company/aquh-onA_FIq-SB/ URL

modified 2026-11-06 22:33:08
Emotet (Telefonica CO SOC) · Emotet (Abuse.ch)

viewall.eu Hostname

modified 2026-11-06 20:40:40
Emotet (Abuse.ch) · VB:Trojan.VBA.Downloader (Hybrid-Analysis)

www.lavenderkart.com Hostname

modified 2026-11-06 20:40:14
VB:Trojan.Valyria (Hybrid-Analysis) · Emotet (Abuse.ch) · LooksLike.Macro.Malware (Hybrid-Analysis)

rodrigozambon.com.br Hostname

modified 2026-11-06 20:40:10
Malware Download (Abuse.ch) · Malware site (Hybrid-Analysis) · Emotet (Abuse.ch)

www.91yudao.com Hostname

modified 2026-11-06 20:39:29
Trojan.Generic (Hybrid-Analysis) · Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

heyer-net.de Hostname

modified 2026-11-06 20:39:20
Emotet (Abuse.ch)

asbestentsorg.de Hostname

modified 2026-11-06 20:38:19
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

support.dogpack.media Hostname

modified 2026-11-06 20:38:03
Malware Download (Abuse.ch) · Emotet (Abuse.ch) · Social Engineering (Abuse.ch) · Malware (Mr.Looquer)

seattlebugsafari.com Hostname

modified 2026-11-06 20:37:36
Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis)

cargacontrol.com.co Hostname

modified 2026-11-06 20:37:24
Emotet (Abuse.ch) · Malicious site (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · Malware Download (Abuse.ch) · Unknown Stealer (ThreatFox Abuse.ch)

hagemeier1.de Hostname

modified 2026-11-06 20:37:15
Malware Download (Abuse.ch) · Emotet (Abuse.ch)

kts.group Hostname

modified 2026-11-06 20:36:55
Emotet (ThreatFox Abuse.ch)

urlhaus-api.abuse.ch Hostname

modified 2026-11-06 20:36:51
Malicious url (Twitter) · Emotet (Telefonica CO SOC) · Malware Download (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

rref.su Hostname

modified 2026-11-06 20:36:42
Malware Download (URLhaus Abuse.ch) · Emotet (ThreatFox Abuse.ch)

rueckert-online.de Hostname

modified 2026-11-06 20:36:30
Emotet (Abuse.ch) · Trojan.Generic (Hybrid-Analysis) · Trojan.Agent (Hybrid-Analysis) · Malware Download (Abuse.ch) · HEUR:Trojan.MSOffice.SAgent (Hybrid-Analysis)

ultimacleaning.com Hostname

modified 2026-11-06 20:36:12
Emotet (Abuse.ch)

uhlenbusch.info Hostname

modified 2026-11-06 20:36:12
Emotet (Abuse.ch) · VB.Heur.EmoDldr.28.3F90881D (Hybrid-Analysis)

chedea.eu Hostname

modified 2026-11-06 20:35:48
Malware Download (Abuse.ch) · Emotet (Telefonica CO SOC) · Emotet (Abuse.ch) · Malicious domain (SANS Internet Storm Center) · Covid19 scam (Cyber Threat Coalition)

reifenquick.de Hostname

modified 2026-11-06 20:35:47
Malware Download (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition) · Malicious URL (Hybrid-Analysis) · Emotet (URLhaus Abuse.ch)

icloudcs.in Hostname

modified 2026-11-06 20:35:45
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Malicious behavior (Maltiverse Threat Observatory)

5.9.155.75 IPv4

modified 2026-11-06 18:02:01
Anonymizer (FireHol) · Generic.Malware (Hybrid-Analysis) · Emotet (Telefonica CO SOC) · AZORult (Cybercrime-tracker.net) · CoinMiner (Cybercrime-tracker.net)

slimfitcaps.com Hostname

modified 2026-11-06 17:49:05
Emotet (Abuse.ch) · Trojan.Generic (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella) · Top Popularity Site (Tranco)

malaysianscoop.com Hostname

modified 2026-11-06 16:39:19
Emotet (Abuse.ch) · Trojan.Generic (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

quke9.com Hostname

modified 2026-11-06 16:39:19
Generic.Malware (Hybrid-Analysis) · Phishing (Phishtank) · VBA.Heur.Logan.849 (Hybrid-Analysis) · Emotet (Abuse.ch) · Malware Download (Abuse.ch)

1it.fit Hostname

modified 2026-11-06 16:39:13
Emotet (ThreatFox Abuse.ch)

91damimi.com Hostname

modified 2026-11-06 16:39:07
Emotet (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

studyresourceport.com.ua Hostname

modified 2026-11-06 16:38:39
Emotet (Abuse.ch)

football-eg.com Hostname

modified 2026-11-06 16:37:16
Covid19 scam (Cyber Threat Coalition) · Emotet (Abuse.ch) · VBA:Logan.909 (Hybrid-Analysis) · VB:Trojan.Valyria (Hybrid-Analysis) · Malicious url (Cyber Threat Coalition)

dayimachine.com Hostname

modified 2026-11-06 16:36:54
Trojan.Generic (Hybrid-Analysis) · Emotet (Abuse.ch) · VB:Trojan.Valyria (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

isague.com Hostname

modified 2026-11-06 16:36:46
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

psishops.com Hostname

modified 2026-11-06 16:36:36
Malicious site (Hybrid-Analysis) · Alexa Top 1 Million (Alexa) · Emotet (Abuse.ch) · Agent (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

www.lixko.com Hostname

modified 2026-11-06 16:36:35
Heur.Macro.Generic.h (Hybrid-Analysis) · Trojan.Generic (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · LooksLike.Macro.Malware (Hybrid-Analysis) · VB:Trojan.Valyria (Hybrid-Analysis)

www.gomespontes.com.br Hostname

modified 2026-11-06 16:36:23
Emotet (ThreatFox Abuse.ch)

pinmeiglobal.com Hostname

modified 2026-11-06 16:36:14
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

www.weblabor.com.br Hostname

modified 2026-11-06 16:35:32
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Malware site (Hybrid-Analysis) · Malicious site (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis)

ko-racingshop.com Hostname

modified 2026-11-06 16:34:50
Emotet (Abuse.ch) · VBA:Logan.909 (Hybrid-Analysis) · Top Popularity Site (Cisco Umbrella)

dancemusic.jp Hostname

modified 2026-11-06 16:34:41
Emotet (Abuse.ch) · Generic.Malware (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

tcenteronline.com Hostname

modified 2026-11-06 16:34:28
Emotet (Maltiverse Research Team) · Malware Download (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious Hostname (Cyber Threat Coalition)

theo.digital Hostname

modified 2026-11-06 16:34:25
Alexa Top 1 Million (Alexa) · Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Top Popularity Site (Cisco Umbrella)

akdavis.com Hostname

modified 2026-11-06 16:34:11
Emotet (Telefonica CO SOC) · Malware site (Hybrid-Analysis) · Malware Download (Abuse.ch)

billingup.com Hostname

modified 2026-11-06 16:33:57
Emotet (Abuse.ch) · Malware Download (Abuse.ch) · Social Engineering (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

n-brake.com Hostname

modified 2026-11-06 16:33:24
Emotet (Abuse.ch) · Covid19 scam (Cyber Threat Coalition) · Malicious url (Cyber Threat Coalition)

www.geosrt.com Hostname

modified 2026-11-06 16:33:16
Trojan.Generic (Hybrid-Analysis) · VB:Trojan.VBA.Agent (Hybrid-Analysis) · Covid19 scam (Cyber Threat Coalition) · Emotet (Abuse.ch) · Agent (Hybrid-Analysis)

www.spiidgas.com.br Hostname

modified 2026-11-06 16:33:12
Emotet (Abuse.ch) · Malware site (Hybrid-Analysis) · Malware Download (Abuse.ch)